nx_hostop_progressive_gate.nx source

1// nx_hostop_progressive_gate.nx -- R7 PROOF: progressive host delivery (multi-host fan-out, rolling, blue-green), 2// composing the publisher's proven primitives onto host-roots. SANDBOX hosts. File-based. license_tier: ORIGINAL expect_exit: 0 3import "nx_syscalls.nx" 4import "nx_hostop.nx" 5import "nx_runpath.nx" 6 7func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 8func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 9func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 } 10func sv_write(path: *u8, content: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd<0 { return 0 } var n: i64=0; while content[n]!=(0 as u8){n=n+1} sys_write(fd, content, n); sys_close(fd); return 1 } 11func g_unlink(path: *u8) -> i64 { __syscall(87, path as i64, 0, 0, 0, 0, 0); return 0 } 12func g_mkdir(D: *u8, name: *u8) -> *u8 { let p: *u8 = sys_mmap(700); pub_join(D, name, p); __syscall(83, p as i64, 493, 0, 0, 0, 0); return p } 13func has_str(path: *u8, needle: *u8) -> i64 { let lp: *i64 = sys_mmap(8) as *i64; let d: *u8 = sys_read_file(path, lp); if (d as i64)==0 { return 0 } return pub_substr(d, lp[0], needle) } 14 15func main() -> i64 { 16 let pass: *i64 = sys_mmap(8) as *i64; pass[0]=0 17 g_w("=== NX-HOSTOP-PROGRESSIVE GATE (multi-host fan-out + rolling + blue-green; sandbox hosts) ===\n" as *u8) 18 let wsid: *u8 = sys_mmap(64); rp_wsid(wsid); rp_ensure(wsid) 19 let D: *u8 = sys_mmap(512); rp_path(wsid, "hpg" as *u8, D); __syscall(83, D as i64, 493, 0, 0, 0, 0) 20 let live: *u8 = g_mkdir(D, "pub_live" as *u8) 21 let led: *u8 = sys_mmap(700); pub_join(D, "ledger.tsv" as *u8, led); g_unlink(led) 22 // publisher-verified+staged release in liveroot/page.html 23 let lp: *u8 = sys_mmap(700); pub_join(live, "page.html" as *u8, lp); sv_write(lp, "REL-V1\n" as *u8) 24 let sha: *u8 = sys_mmap(72); pub_sha_file(lp, sha) 25 pub_record_ledger(led, sha, "page.html" as *u8, "site" as *u8) 26 27 // ---- MULTI-HOST FAN-OUT: apply to 3 hosts ---- 28 let h1: *u8 = g_mkdir(D, "h1" as *u8); let h2: *u8 = g_mkdir(D, "h2" as *u8); let h3: *u8 = g_mkdir(D, "h3" as *u8) 29 let hosts: *i64 = sys_mmap(64) as *i64; hosts[0]=h1 as i64; hosts[1]=h2 as i64; hosts[2]=h3 as i64 30 let fanned: i64 = hostop_fanout(led, live, "page.html" as *u8, sha, hosts, 3) 31 let h1p: *u8 = sys_mmap(700); pub_join(h1, "page.html" as *u8, h1p) 32 let h3p: *u8 = sys_mmap(700); pub_join(h3, "page.html" as *u8, h3p) 33 let all_hosts: i64 = (has_str(h1p, "REL-V1" as *u8)) & (has_str(h3p, "REL-V1" as *u8)) 34 35 // ---- ROLLING: apply to [r1, BLOCKER(file-as-parent -> fails), r3]; halt at the blocker ---- 36 let r1: *u8 = g_mkdir(D, "r1" as *u8); let r3: *u8 = g_mkdir(D, "r3" as *u8) 37 let blk: *u8 = sys_mmap(700); pub_join(D, "blk" as *u8, blk); sv_write(blk, "x" as *u8) // a FILE, not a dir 38 let r1p: *u8 = sys_mmap(700); pub_join(r1, "page.html" as *u8, r1p); g_unlink(r1p) 39 let r3p: *u8 = sys_mmap(700); pub_join(r3, "page.html" as *u8, r3p); g_unlink(r3p) 40 let rhosts: *i64 = sys_mmap(64) as *i64; rhosts[0]=r1 as i64; rhosts[1]=blk as i64; rhosts[2]=r3 as i64 41 let rolled: i64 = hostop_rolling(led, live, "page.html" as *u8, sha, rhosts, 3) 42 let roll_ok: i64 = ((rolled==1) as i64) & (has_str(r1p, "REL-V1" as *u8)) & ((pub_exists(r3p)==0) as i64) 43 44 // ---- BLUE-GREEN on a host: stage blue+green, flip, flip-back ---- 45 let bg: *u8 = g_mkdir(D, "bghost" as *u8) 46 let s1: *u8 = sys_mmap(700); pub_join(D, "b.src" as *u8, s1); sv_write(s1, "BLUE-1\n" as *u8) 47 let s2: *u8 = sys_mmap(700); pub_join(D, "g.src" as *u8, s2); sv_write(s2, "GREEN-2\n" as *u8) 48 let sb: *u8 = sys_mmap(72); pub_sha_file(s1, sb); let sg: *u8 = sys_mmap(72); pub_sha_file(s2, sg) 49 let active: *u8 = sys_mmap(700); pub_join(bg, "site.html" as *u8, active); g_unlink(active) 50 hostop_blue_green_stage(bg, "site.html" as *u8, "blue" as *u8, s1, sb) 51 hostop_blue_green_stage(bg, "site.html" as *u8, "green" as *u8, s2, sg) 52 hostop_blue_green_flip(bg, "site.html" as *u8, "green" as *u8) 53 let on_green: i64 = has_str(active, "GREEN-2" as *u8) 54 hostop_blue_green_flip(bg, "site.html" as *u8, "blue" as *u8) 55 let flip_back: i64 = has_str(active, "BLUE-1" as *u8) 56 57 g_w(" fanned=" as *u8); g_n(fanned); g_w(" all_hosts=" as *u8); g_n(all_hosts); g_w(" rolled=" as *u8); g_n(rolled); g_w(" bg on_green=" as *u8); g_n(on_green); g_w(" flip_back=" as *u8); g_n(flip_back); g_w("\n" as *u8) 58 g_row("MULTI-HOST FAN-OUT: verified release applied to all 3 hosts" as *u8, ((fanned==3) as i64) & all_hosts, pass) 59 g_row("ROLLING: halts at the failing host (rolled=1), #1 applied, #3 NEVER touched (blast-limited)" as *u8, roll_ok, pass) 60 g_row("HOST BLUE-GREEN: instant flip to green then flip-back to blue (zero-copy)" as *u8, on_green & flip_back, pass) 61 62 g_w("NX-HOSTOP-PROGRESSIVE rows=3 pass=" as *u8); g_n(pass[0]) 63 if pass[0]==3 { g_w(" verdict=GREEN\n" as *u8); sys_exit(0); return 0 } 64 g_w(" verdict=RED\n" as *u8); sys_exit(1); return 1 65}